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DETAILED ACTION 



1 . Claims 1 - 1 3 are presented for examination. 



Specification 

2. The following guidelines illustrate the preferred layout for the specification of a utility 
application. These guidelines are suggested for the applicant's use. 

Arrangement of the Specification 

As provided in 37 CFR 1.77(b), the specification of a utility application should include 
the following sections in order. Each of the lettered items should appear in upper case, without 
underlining or bold type, as a section heading. If no text follows the section heading, the phrase 
"Not Applicable" should follow the section heading: 

(a) TITLE OF THE INVENTION. 

(b) CROSS-REFERENCE TO RELATED APPLICATIONS . 

(c) STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR 

DEVELOPMENT. 

(d) INCORPORATION-BY-REFERENCE OF MATERIAL SUBMITTED ON A 

COMPACT DISC (See 37 CFR 1.52(e)(5) and MPEP 608.05. Computer program 
listings (37 CFR 1.96(c)), "Sequence Listings" (37 CFR 1.821(c)), and tables 
having more than 50 pages of text are permitted to be submitted on compact 
discs.) or 

REFERENCE TO A "MICROFICHE APPENDIX" (See MPEP § 608.05(a). 
"Microfiche Appendices" were accepted by the Office until March 1, 2001.) 

(e) BACKGROUND OF THE INVENTION. 

(1) Field of the Invention. 

(2) Description of Related Art including information disclosed under 37 CFR 1.97 
and 1.98. 

(f) BRIEF SUMMARY OF THE INVENTION. 

(g) BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING(S). 

(h) DETAILED DESCRIPTION OF THE INVENTION. 

(i) CLAIM OR CLAIMS (commencing on a separate sheet). 

(j) ABSTRACT OF THE DISCLOSURE (commencing on a separate sheet). 

(k) SEQUENCE LISTING (See MPEP § 2424 and 37 CFR 1.821-1.825. A "Sequence 
Listing" is required on paper if the application discloses a nucleotide or amino 
acid sequence as defined in 37 CFR 1.821(a) and if the required "Sequence 
Listing" is not submitted as an electronic document on compact disc). 
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Claim Rejections - 35 USC §112 

3. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

4. Claims 3, 5, 6, and 8 are rejected under 35 U.S.C. 1 12, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. Claims 3, 5, 6, and 8 recite "p.sub.diff ' and "p.sub.lin" 
Applicant did not define "p.sub.diff and "p.sub.lin" distinctly in the claim or in the 
specification. Applicant is required to distinctly point out the claimed subject matter which 
applicant regards as the invention in response to this office action. (The correction is given in 
light of the submitted specification). 

Claim Rejections - 35 USC §103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. Claims 1-2, 4, 6-7, and 9-13 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Lee et al. (Lee, Patent No.: US 6,314,186 Bl) in view of Magliveras et al. (Magliveras, 



Patent Number: 6,038,317). 
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7. As per claim 1, Lee teaches a method for crypto graphically converting an input data 
block into an output data block (Lee Col. 4 lines 39-51, and Fig. 1); the method including 
performing a non-linear operation on the input data block using an S-box based on a permutation 
(Lee Col. 4 lines 39-51, Fig. 1, and Col. 1 lines 59-65), 

Lee does not explicitly teach selecting the permutation from a predetermined set of at 
least two permutations associated with the S-box, 

However Magliveras teaches selecting the permutation from a predetermined set of at 
least two permutations associated with the S-box that reads on wherein the method includes each 
time before using the S-box (pseudo-)randomly selecting the permutation from a predetermined 
set of at least two permutations associated with the S-box (Magliveras Col. 6 lines 6-58), 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Magliveras with in the system of Lee because 
it would allow an efficient method of multiplying or factoring elements of the permutation 
groups (Magliveras Col. 1 lines 1 1-24). Therefore it would have been obvious to one having 
ordinary skill in the art at the time of the invention was made to select the permutation from a 
predetermined set of at least two permutations associated with the s-box before using the s-box 
(pseudo-)randomly because it would make the system cryptographically stronger than a system 
in which each s-box consists of only one fixed permutation and fast execution. 

As per claim 13, Lee teaches a system for cryptographically converting an input data block into 
an output data block; the method system including: 
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an input for receiving the input data block (Lee Fig. 1 No. 10); 

a cryptographic processor for performing a non-linear operation on the input data block 
using an S-box based on a permutation (Lee Col. 4 lines 39-51); and 

an output for outputting the processed input data block (Lee Fig. 3 No. 60, and Col. 4 
lines 39-51) 

Lee does not explicitly teach a storage for storing a predetermined set of at least two 
permutations associated with an S-box; 

selecting the permutation from a predetermined set of at least two permutations 
associated with the S-box, 

However Magliveras teaches a storage for storing a predetermined set of at least two 
permutations associated with an S-box (Magliveras Col. 42 lines 30-65); 

selecting the permutation from a predetermined set of at least two permutations 
associated with the S-box that reads on the processor being operative to, each time before using 
the S-box, (pseudo-)randomly selecting the permutation from the stored set of permutations 
associated with the S-box (Magliveras Col. 73 lines 1-44, and col. 6 lines 6-58), 

Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Magliveras with in the system of Lee because 
it would allow an efficient method of multiplying or factoring elements of the permutation 
groups (Magliveras Col. 1 lines 1 1-24). Therefore it would have been obvious to one having 
ordinary skill in the art at the time of the invention was made to select the permutation from a 
predetermined set of at least two permutations associated with the s-box before using the s-box 
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(pseudo-)randomly because it would make the system cryptographically stronger than a system 
in which each s-box consists of only one fixed permutation and fast execution. 

As per claim 2, Lee and Magliveras teach all the subject matter as described above. In addition 
Magliveras teaches a method, wherein the set of permutations is formed such that a 
cryptographic weakness in one of the permutations of the set is at least partially compensated by 
a corresponding cryptographic strength in at least one of the other permutations of the set 
(Magliveras Col. 1 lines 10-25, and col. 73 lines 17-44). The rational for combining are the same 
as claim 1 above. 

As per claim 4, Lee and Magliveras teach all the subject matter as described above. In addition 
Lee teaches a method, wherein the differential characteristic has a probability equal to zero in at 
least one of the permutations (Lee Col. 2 lines 35-53). 

As per claim 6, Lee and Magliveras teach all the subject matter as described above. In addition 
Lee teaches a method, wherein the data block consists of n data bits and each element of the set 
of permutations is a permutation on a set of 2.sup.n elements, represented by Z.sub.2.sup.n (Lee 
Col. 27 lines 65-col. 26 lines 14), where each non-trivial linear characteristic of each permutation 
in this set has a probability of at least 1/2-p.sub.lin and at most 1/2+p.sub.lin, the set of 
permutations being formed by permutations which have been selected such that for each non- 
trivial linear characteristic with probability of 1/2-p.sub.lin or 1/2+p.sub.lin in any of the 
permutations, this linear characteristic has a probability closer to 1/2 in at least one of the other 
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permutations of the set (Lee Col. 2 lines 35-53, and col. 5 lines 66-col. 6 lines 8). 

As per claim 7, Lee and Magliveras teach all the subject matter as described above. In addition 
Lee teaches a method, wherein the linear characteristic has a probability equal to 1/2 in at least 
one of the permutations (Lee Col. 2 lines 35-53, and col. 5 lines 66-col. 6 lines 8). 

As per claim 9, Lee and Magliveras teach all the subject matter as described above. In addition 
Magliveras teaches a method, wherein the set of permutations consists of two permutations 
(Magliveras Col. 73 lines 14-44). The rational for combining are the same as claim 1 above. 

As per claim 10, Lee and Magliveras teach all the subject matter as described above. In addition 
Magliveras teaches a method, including performing the selection of the permutation under 
control of an encryption key (Magliveras Col. 12 lines 45-67). The rational for combining are the 
same as claim 1 above. 

As per claim 1 1 , Lee and Magliveras teach all the subject matter as described above. In addition 
Lee teaches a method, wherein the selection of the permutation is performed under control of one 
bit of the encryption key (Lee Col. 3 lines 22-34). 

As per claim 12, Lee and Magliveras teach all the subject matter as described above. In addition 
Lee teaches a computer program product where the program product is operative to cause a 
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processor to perform the method of claim 1 (Lee Col. 5 lines 55-65). 

8. Claims 3, 5, and 8 are rejected under 35 U.S.C. 103(a) as being unpatentable over Lee et 
al. (Lee, Patent No.: US 6,314,186 Bl) in view of Magliveras et al. (Magliveras, Patent Number: 
6,038,317), and in further view of Applicant Admitted Prior Art (AAPA). 

As per claim 3, Lee and Magliveras teach all the subject matter as described above. In addition 
Lee teaches a method, wherein the data block consists of n data bits and each element of the set 
of permutations is a permutation on a set of 2.sup.n elements, represented by Z.sub.2.sup.n (Lee 
Col. 27 lines 65-col 28 lines 14), 

Lee and Magliveras do not explicitly teach where each non-trivial differential 
characteristic of each permutation in this set has a probability of at p.sub.diff; the set of 
permutations being formed by permutations which have been selected such that for each non- 
trivial differential characteristic with probability of p.sub.diff in any of the permutations, this 
differential characteristic has a probability lower than p.sub.diff in at least one of the other 
permutations of the set. 

However AAPA discloses where each non-trivial differential characteristic of each 
permutation in this set has a probability of at p.sub.diff; the set of permutations being formed by 
permutations which have been selected such that for each non-trivial differential characteristic 
with probability of p.sub.diff in any of the permutations, this differential characteristic has a 
probability lower than p.sub.diff in at least one of the other permutations of the set (AAPA Page 
6 lines 26-page 7 lines 31). 
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Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of AAPA with in the system of Lee and 
Magliveras because it would allow to compensate a cryptographic weakness in one of the 
permutations by a corresponding strength in at least one of the other permutations of the set. 

As per claim 5, Lee, Magliveras, and AAPA teach all the subject matter as described above. In 
addition AAPA discloses a method as claimed in claim 4, wherein n=4, and p.sub.diff=l/4 
(AAPA Page 6 lines 26-32). The rational for combining are the same as claim 3 above. 

9. As per claim 8, Lee, Magliveras, and AAPA teach all the subject matter as described 
above. In addition AAPA discloses a method, wherein n=4 and p.sub.lin=l/4 (AAPA Page 6 
lines 26-page 27 lines 5). The rational for combining are the same as claim 3 above. 

1 0. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Eleni A Shiferaw whose telephone number is 571-272-3867. The 
examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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